我有来自PHP, .htaccess, DDoS & speedy request protection的这个脚本(第二个没有会话)
<?php
# get the visitor ip
$i = $_SERVER["REMOTE_ADDR"];
# get the filename and location
$f = 'log/'.ip2long($i).'.dat';
# check if the file exists and we can write
if ( is_file($f) ) {
# get the last filetime
$a = filemtime($f);
# get the file content
$b = file_get_contents($f);
# create array from hits & seconds
$d = explode(':',$b);
# calculate the new result
$h = (int)$d[0] + 1;
$s = (int)$d[1] + (time()-$a);
# add the new data tot text file
file_put_contents($f,"$h:$s",LOCK_EX);
unset($d);
}else{
# create the file if it doesn't exist hits:seconds
file_put_contents($f,"1:1",LOCK_EX); #size: 3kb
# to make sure we can write
# chmod($f,0755);
# set the hits to zero
$h = 0;
}
# create a result var
$r = $h > 10 ? (float)$s/$h : (float)1;
# calculate the diff after 10 hits, and ban when the avg is smaller than 0.20 seconds (5 hits per second)
if( $r < 0.20 ) {
# check if we can open htaccess
$fp = @fopen('../.htaccess','a');
if($fp){
# add the ip to htaccess
@fwrite($fp,"\r\n#DDoS\r\ndeny from $i");
# close
@fclose($fp);
# mail the admin
@mail("email","IP Banned","Ip: $i with $r sbh (Seconds Between Hits)");
}
# remove file and let the user know why we deny him or her access
unlink($f);
die('To many requests.');
}
# if the user leaves, reset
if( $r > 30 ) {
unlink($f);
}
echo 'Result: '.$r.'sbh (Seconds Between Hits)';
?>
当我直接访问它时似乎工作正常。但是,当我使用以下内容包含它时:
include_once($_SERVER['DOCUMENT_ROOT'] . "/dir/ddos.php");
页面输出是一些奇怪的文字,如:http://i.imgur.com/dc0HgZr.png
在错误文件中有这一行:
[TIME] PHP Warning: file_put_contents(log/1869573999.dat): failed to open stream: No such file or directory in /home/user/public_html/dir/ddos.php on line 22
哦,我忘了提到这一行
echo 'Result: '.$r.'sbh (Seconds Between Hits)';
显示为Result: 1sbh (Seconds Between Hits)